Re: howto monitor a program creating links in /tmp?

[Joachim Backes <joachim.backes@xxxxxxxxxxxxxx>]

On 04/23/2010 12:29 PM, Jeff Raber wrote:
> > Anybody has an advice howto find out who is creating these links?
> >
> > Kind regards
>
> Try using auditd.  Something like:
> 	sudo auditctl -w /some/file -k test-audit -p rwxa
> then later
> 	sudo ausearch -f /some/file
>
> -Jeff

Hi Jeff,

thank you very much for your hints. Using auditd gave me exactly the 
information I needed. The program creating the links was *gcm-apply*.

Kind regards

--
Joachim Backes <joachim.backes@xxxxxxxxxxxxxx>

http://www.rhrk.uni-kl.de/~backes

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test